Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) component of Yoke. It allows users with CR create/update permissions to execute arbitrary WASM code in the ATC controller context by injecting a malicious URL through the overrides.yoke.cd/flight annotation. The ATC controller downloads and executes the WASM module without proper URL validation, enabling attackers to create arbitrary Kubernetes resources or potentially escalate privileges to cluster-admin level.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-12 | 1 | General1 |
| 2026-02-13 | 2 | Disclosure2 |
CVE-2026-26056 Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) component of … https://www.cve.org/CVERecord?id=CVE-2026-26056
Post summary
The passage notes the existence of CVE-2026-26056 affecting Yoke’s Air Traffic Controller component, with no further technical details, exploitation evidence, or remediation information.
Arbitrary WASM code execution (CVE-2026-26056) impacts `yokecd/yoke` in its `Yoke ATC` component via AnnotationOverrideFlight injection. Organizations should review their deployments. #WASM #CodeExecution #infosec https://www.pulsepatch.io/posts/cve-2026-26056-yoke-wasm-code-execution
Post summary
The tweet announces CVE-2026-26056, a WASM code‑execution flaw in yokecd/yoke’s Yoke ATC component via AnnotationOverrideFlight injection, urging organizations to review their deployments.
CVE-2026-26056: Yoke ATC: Flying Blind into WASM RCE A critical remote code execution vulnerability in Yoke's Air Traffic Controller (ATC) component allows attackers to execute arbitrary WebAssembly (WASM) modules via simple Kubernetes annotations. By... https://cvereports.com/reports/CVE-2026-26056
Post summary
A critical RCE vulnerability in Yoke’s ATC component permits attackers to run arbitrary WebAssembly modules through Kubernetes annotations.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | yokecd | yoke | - | - | - |